Simon McVittie <s...@debian.org> writes:

> On Wed, 23 Jul 2025 at 23:53:58 +0200, Simon Josefsson wrote:
>>Is it forbidden for packages to exist in unstable and/or experimental
>>only in Debian?
>
> It is allowed. firefox (the non -esr version) and wine-development are
> examples of packages that exist only in unstable (with a RC bug to
> stop them from migrating to testing), while libsdl3-mixer and openjk
> are examples of packages that exist only in experimental.

Thanks for confirming!  This aspect wasn't terribly clear to me. Is it
discussed in any policy document?

>>While liboqs is not intended for normal production use because of
>>certain properties, it is useful for its designated purposes of
>>experiments and testing.  I think we somehow conflate these two,
>>thinking that everything in a Debian stable release MUST be intended for
>>secure production use.
>
> Debian stable is exactly for production use

There are plenty of things in debian stable clearly marked as unsuitable
for critical use - most of the Go and Rust ecosystems, but many other
packages too.  Or am I missing something?

Maybe it is the definition of "production use" that is what is at heart
here.  Production use of software X for user A may be completely frown
upon for user B because they have different use-cases in mind that it
doesn't meet desirable properties.  I don't think unsuitability for one
use-case is motivation enough to ban a package from stable and/or
unstable.

/Simon

Attachment: signature.asc
Description: PGP signature

Reply via email to